CLAIMS 

What is Claimed is: 

1 . A system for checking consistency of a4ock-step process comprising: 

a production microcontroller installed on attest circuit, the production 
microcontroller running a microcontroller cod/ and producing a first value; 

an ICE (in circuit emulator) coupled/to a host device, wherein the ICE 
emulates the production microcontrolle/to form a virtual microcontroller, the virtual 
microcontroller running the microcontroller code simultaneously with the 
production microcontroller and pnoducing a second value; and 

an interface for coupling/the production microcontroller and the ICE enabling 
transmission of the first value/o the ICE, wherein the ICE compares the first value 

against the second value. / 

2 A system fo/ checking consistency of a lock-step process as recited in 
Claim 1 wherein the microcontroller is installed on a POD. 

3. A system for checking consistency of a lock-step process as recited in 
Claim 1 wherein the/ microcontroller is substantially copied in a field programmable 

gate array (FPGA)/n the ICE. 

4. A stystem for checking consistency of a lock-step process as recited in 
Claim 1 where ftie production microcontroller sends to the ICE a result of an 

execution of a line of code. 

5. /A system for checking consistency of a lock-step process as recited in 
Claim 1 where the ICE ignores execution of the microcontroller code if the 
microcontroller code executed by the microcontroller is an I/O instruction. 
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6. A system for checking consistency of a lock-step process as recited in 
Claim 1 where the ICE ignores execution of the microcontrollejxcode if there is an 
interrupt in operation of the microcontroller. 

7. A system for checking consistency of a locWep process as recited in 
Claim 1 wherein the ICE stores the second value f/comparison with the first value 
received from the production microcontroller. 

8. A system for checking consiste/cy of a lock-step process as recited in 
Claim 1 wherein the ICE sends an error s^nal when the first value and the second 

value are inconsistent. 

9. A system for checking Consistency of a lock-step process as recited in 
Claim 1 wherein the ICE independently detect inconsistency in the first value and 
the second value when there is/n interrupt in operation of the production 
microcontroller. 

1 0. A system for c/ecking consistency of a lock-step process as recited in 
Claim 1 wherein the production microcontroller may receive data from a test circuit. 

11. A system f/r checking consistency of a lock-step process as recited in 
Claim 1 wherein the production microcontroller may receive data from a product 
that is intended to be/controlled by the microcontroller. 

1 2. A system for checking consistency of a lock-step process as recited in 
Claim 1 wherein tj/e production microcontroller provides the ICE with I/O read 
information sent by the test circuit. 

1 3. A/system for checking consistency of a lock-step process as recited in 
Claim 1 wherein the production microcontroller provides the ICE with I/O read 
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information sent by a product that is intended to be controlled by the 
microcontroller. 

1 4. A system for checking consistency of a lock-step process as recited in 
Claim 1 wherein the ICE compares the first and the second values and where there 
is inconsistency a software residing in the ICE hj*Tts the execution of microcontroller 
and issues an error signal. 

15. A method for verifying lock sjep microcontroller code execution in a 

code debugging process comprising: 

a) initializing a first memory of an ICE (in circuit emulator) and a second 
35) memory of a microcontroller withyfnicrocontroller test code; 
Jj b) executing the microcontroller test code on the microcontroller and on 

the ICE in lock step; 
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c) computing an ICE current instruction result and a microcontroller 

current instruction resum 

d) verifyinqflock step execution by comparing the ICE current instruction 
result and the microcontroller current instruction result; 

d) if lock step execution is not verified, halting the execution of the 
microcontroller test code and reporting an error; and 

e) if /ock step execution is verified, continuing execution of the 
20 microcontroller test code. 

1 6. /The method of Claim 1 5 further comprising: 
if look step execution is not verified, saving an execution history using a 
trace buffer coupled to the ICE. 
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1 7. The method of Claim 1 5 further comprising: 
transmitting the microcontroller current instruction result from the 

microcontroller to the ICE for verifying the lock step execution. 

1 8. The method of Claim 1 5 wherein the ICE jghores execution of an 
instruction if the instruction is an I/O instruction. 

1 9. The method of Claim 1 5 wherein jhe ICE ignores execution of an 
instruction if the instruction is an interrupt. 

20. The method of Claim 1 5 wherein the ICE independently detects 
inconsistency between the ICE curreft instruction result and the microcontroller 
current instruction result when the4xecution of the microcontroller test code is 

halted. / 

21 A lock step code execution microcontroller testing system comprising: 

/ 

a microcontroller installed on a test circuit, the microcontroller running 
microcontroller code, the microcontroller is installed on a POD; 

an ICE (in circuit emulator) coupled to a host device, wherein the ICE 

/ 

emulates the microcontroller using a field programmable gate array ( FPGA) in the 

/ 

ICE, the ICE running the microcontroller code simultaneously with the 



microcontroller; and 

an interface for coupling the microcontroller and the ICE enabling data 
transmission between the ICE and the microcontroller, wherein the ICE compares a 
microcontroller execution result with an ICE execution result to verify lock step 
microcontroller code execution. 
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22. The system of Claim 21 wherein the ICE ignores^execution of the 
microcontroller code if the microcontroller code execute<3 by the microcontroller is 
an I/O instruction. 

23. The system of Claim 21 whereifi the ICE ignores execution of the 
microcontroller code if the microcontroller code is an interrupt instruction. 

24. The system of ClaiiV21 wherein the ICE independently detects 
inconsistency between the mj^ocontroller execution result and the ICE execution 
result when there is a halt/In the operation of the microcontroller. 

25. The system of Claim 21 wherein the microcontroller is coupled to 
receive data from e/product that is intended to be controlled by the microcontroller. 

26. The system of Claim 21 wherein the microcontroller provides the ICE 
with I/O readMnformatibn sent by a product that is intended to be controlled by the 
microcontroller. 
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